Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
A BOLA vulnerability in POST /services in EasyAppointments < 1.5.0
Vulnerability Description
A BOLA vulnerability in POST /services allows a low privileged user to create a service for any user in the system (including admin). This results in unauthorized data manipulation.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
Vulnerability Type
通过用户控制密钥绕过授权机制
Vulnerability Title
Easy!Appointments 安全漏洞
Vulnerability Description
Easy!Appointments是一套基于Web的预约、日程管理系统。 Easy!Appointments 存在安全漏洞，该漏洞源于 /services 接口存在不安全的授权问题。低权限攻击者利用该漏洞可以为系统中的任何用户（包括管理员）创建服务。
CVSS Information
N/A
Vulnerability Type
N/A